Static task
static1
Behavioral task
behavioral1
Sample
8a6afe25a0ad97b13452f523fe9c7445_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a6afe25a0ad97b13452f523fe9c7445_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8a6afe25a0ad97b13452f523fe9c7445_JaffaCakes118
-
Size
155KB
-
MD5
8a6afe25a0ad97b13452f523fe9c7445
-
SHA1
c8d782dd29c20915827df9c8e3ec26c79516521a
-
SHA256
f5e5a822d3ab8f8ff6cd25deb845f9015b81729978144ed4e15df9d3b05a6a01
-
SHA512
61a24827e453fc22639b90b90edb763d56ad61eda184757788ccd2b3d57f1b1b2408616052ba502ef54826fa1078079d13a34109d44352b1009835307dfa7569
-
SSDEEP
3072:MeBLos+JYvCG3xXZVOQ1XE3eoHGrkjdRkXeZA5xllyaPWZP2GykA3dmG:M2osyYvFhXZVF9EuofdCXjr7XWZbnAQG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a6afe25a0ad97b13452f523fe9c7445_JaffaCakes118
Files
-
8a6afe25a0ad97b13452f523fe9c7445_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
nsp0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE